Privacy Policy

The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:

CU Advisory GmbH
Christian Uhrig
Lilienweg 11
68782 Brühl
Germany

E-mail: christian.uhrig@cu-advisory.net
Phone: +49 (0) 152 280 468 48

Protecting your personal data is important to us. We process personal data exclusively in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

We process personal data only to the extent necessary for the provision of our website, the handling of inquiries, the implementation of pre-contractual measures, the fulfillment of contractual obligations, or compliance with legal requirements.

Our website is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany.

When you visit our website, the hosting provider automatically collects information in so-called server log files. This includes, in particular:

• IP address of the requesting device
• Date and time of access
• Name and URL of the requested file
• Browser type and browser version
• Operating system used
• Referrer URL
• HTTP status code
• Volume of data transferred

This data is processed to ensure the uninterrupted operation of the website, maintain system security, and prevent attacks and misuse.

Legal basis:
Article 6(1)(f) GDPR (legitimate interest)

Our legitimate interest lies in the secure, stable, and efficient provision of our online services.

Further information on STRATO’s privacy policy can be found at: https://www.strato.de/datenschutz/

If you use our contact form, the information you provide will be processed in order to handle your inquiry and communicate with you.

The following data may be processed:

• Name
• Company
• E-mail address
• Telephone number (optional)
• Content of your message

Providing this data is voluntary. However, without the required information, your inquiry may not be processed.

Legal bases:

• Article 6(1)(b) GDPR (pre-contractual measures)
• Article 6(1)(f) GDPR (legitimate interest in handling inquiries)

The data submitted through the contact form is used exclusively to process your request.

If you contact us by e-mail or telephone, we process the personal data you provide to handle your request.

This includes in particular:

• Name
• Contact details
• Company information
• Contents of your message

Legal bases:

• Article 6(1)(b) GDPR
• Article 6(1)(f) GDPR

As part of our consulting, coaching, interim management, governance, risk management, compliance and internal audit services, we process personal data relating to customers, business partners and contact persons.

This is carried out in particular for the following purposes:

• Initiation and performance of contractual relationships
• Project management and service delivery
• Communication with customers and business partners
• Invoicing
• Compliance with legal and regulatory requirements

Legal bases:

• Article 6(1)(b) GDPR
• Article 6(1)(c) GDPR
• Article 6(1)(f) GDPR

For the conduct of our business activities, we engage selected external service providers, for example for:

• Hosting
• IT operations
• E-mail communications
• Cloud services
• Video conferencing
• Accounting and tax advisory services

Where such service providers process personal data on our behalf, this is done based on a data processing agreement pursuant to Article 28 GDPR.

We use Microsoft 365 services for business communication, collaboration, and the management of documents and appointments.

The following data may in particular be processed:

• Contact details
• Communication data
• Calendar information
• Document contents
• E-mail communication

Processing takes place for the execution of our business processes and efficient collaboration.

Legal bases:

• Article 6(1)(b) GDPR
• Article 6(1)(f) GDPR

Further information can be found at: https://privacy.microsoft.com/en-us/privacystatement

We use Microsoft Teams for online meetings, workshops and coordination discussions.

The following data may in particular be processed:

• Name
• E-mail address
• Meeting metadata
• Audio and video data
• Chat content
• Shared documents

Legal bases:

• Article 6(1)(b) GDPR
• Article 6(1)(f) GDPR

We operate a company page on LinkedIn.

When you visit our LinkedIn page, LinkedIn processes personal data under its own responsibility. We do not have full control over the nature and scope of such data processing.

Further information can be found in LinkedIn’s Privacy Policy:

https://www.linkedin.com/legal/privacy-policy

Our website uses only technically necessary cookies where required for the operation of the website.

We currently do not use any analytics, tracking, or marketing cookies.

Should additional cookies be used in the future, we will inform you separately and obtain any necessary consent.

We store personal data only for as long as necessary for the respective processing purposes or as required by statutory retention obligations.

In particular, the following retention periods apply:

• Business and commercial records: up to 10 years
• Tax-related documents: up to 10 years
• Inquiries submitted via contact form or e-mail: generally up to 6 months after final processing, unless statutory retention obligations apply

After the processing purpose ceases to apply and statutory retention periods have expired, the data will be deleted.

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent with effect for the future (Art. 7(3) GDPR)

To exercise your rights, you may contact us at any time using the contact details provided above.

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

Competent supervisory authority for Baden-Württemberg:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart
Germany

https://www.baden-wuerttemberg.datenschutz.de

We implement appropriate technical and organizational security measures to protect your personal data against loss, manipulation, unauthorized access, or any other unauthorized processing.

Our website uses encrypted data transmission via SSL/TLS technology (HTTPS).

No automated decision-making, including profiling within the meaning of Article 22 GDPR, takes place.

We reserve the right to amend this Privacy Policy if necessary due to legal changes, technical developments, or new services.

The current version is published on our website.

Last updated: September 2026